CVE-2026-57175

Awaiting Analysis Awaiting Analysis - Queue

SAML Identity Spoofing in Python Social Auth

Publication date: 2026-09-24

Last updated on: 2026-10-05

Assigner: GitHub, Inc.

Description

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued `AuthnRequest`. Applications using SAML account association could allow an attacker with a valid account on a trusted IdP to link the attacker's SAML identity to a logged-in victim's local account. The attacker could then authenticate through SAML and gain access to the victim's account. The issue affects applications using the SAML backend together with authenticated account association. The issue has been fixed in version 5.0.0 by validating SAML responses against stored `AuthnRequest` IDs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-05

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-57175

EUVD

EUVD-2026-86309

Affected Vendors & Products

Vendor	Product	Version / Range
python_social_auth	python_social_auth	to 5.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability affects Python Social Auth versions prior to 5.0.0. The SAML backend accepted SAML responses without verifying they matched a previously issued AuthnRequest. This allows an attacker with a valid account on a trusted Identity Provider to link their SAML identity to a logged-in victim's local account, potentially gaining unauthorized access.

Detection Guidance

To detect this vulnerability, check if your system is running Python Social Auth versions prior to 5.0.0. Run: pip show social-auth-core or pip list | grep social-auth-core. If the version is below 5.0.0, the system is vulnerable.

Impact Analysis

An attacker could exploit this to gain access to a victim's account by linking their SAML identity to the victim's local account. This could lead to unauthorized access to sensitive data or actions within the application.

Compliance Impact

This vulnerability could potentially violate compliance with standards like GDPR and HIPAA by enabling unauthorized account access. If an attacker gains access to a victim's account, it may lead to unauthorized data exposure or modification, which conflicts with requirements for data protection and access control in these regulations.

Mitigation Strategies

Immediately upgrade to Python Social Auth version 5.0.0 or later. If upgrading is not possible, disable SAML account association for authenticated users or remove the SAML backend from authentication backends if not required.

Hi! I’m here to help you understand CVE-2026-57175. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70